$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206042.roa File: AS206042.roa (raw, json) Hash identifier: y1E2Raj8UgvjS7xcQI+XZb6B5ThFFzYo8TsJncskJZg= Subject key identifier: FF:B3:F0:F5:D4:BC:3A:36:BE:D9:C4:AB:88:5B:E3:6E:FF:7D:C5:8F Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 6B3ED2C7FDE0E41043BC0950BA09DACD8E8D873E Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206042.roa Signing time: Wed 01 Oct 2025 22:20:09 +0000 ROA not before: Wed 01 Oct 2025 22:15:09 +0000 ROA not after: Wed 30 Sep 2026 22:20:09 +0000 asID: 206042 IP address blocks: 2a05:dfc1:4b00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 13:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3e:d2:c7:fd:e0:e4:10:43:bc:09:50:ba:09:da:cd:8e:8d:87:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Oct 1 22:15:09 2025 GMT Not After : Sep 30 22:20:09 2026 GMT Subject: CN=FFB3F0F5D4BC3A36BED9C4AB885BE36EFF7DC58F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:33:ae:d8:94:0a:59:cc:9e:e7:7c:ec:38:54: 56:96:ee:83:34:af:ca:13:f8:88:f8:50:74:fc:3a: e1:f7:3d:a7:d4:f1:26:3d:9a:c6:56:25:d0:37:91: 7d:0b:12:95:ce:de:97:96:2b:aa:f6:27:bc:28:af: df:21:fa:d6:1c:11:2a:06:2f:be:ea:1a:bd:46:fc: 54:53:6e:03:28:97:54:c6:ed:28:54:41:83:a7:29: d7:7d:ec:d2:5f:6a:d9:65:f1:e9:a6:ae:99:3b:c8: eb:f1:54:03:1f:ae:d4:0e:13:cf:51:43:ec:f2:db: c7:9f:f0:82:21:19:53:47:92:c1:01:c8:1f:a5:9a: c3:b7:0f:d5:6a:47:e0:23:1e:1c:46:2c:be:3a:ab: 52:c7:87:b6:c5:eb:ab:76:71:fa:fe:a5:94:90:20: 08:21:46:0a:e7:5f:44:21:97:3c:f5:85:58:76:8e: d1:e9:55:57:e8:93:39:4c:13:25:87:8f:10:6d:15: 5a:6e:58:6d:cc:62:97:b5:0a:5b:19:43:ef:16:1e: 02:aa:e5:e4:f2:32:84:14:bb:7b:d9:a9:bd:9c:c6: 3e:b3:72:f0:98:c7:7a:a0:93:e5:5f:5b:6d:44:b2: 3e:5b:89:d3:45:8b:27:f8:63:33:95:30:2d:53:6c: 3a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B3:F0:F5:D4:BC:3A:36:BE:D9:C4:AB:88:5B:E3:6E:FF:7D:C5:8F X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206042.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:4b00::/40 Signature Algorithm: sha256WithRSAEncryption 3d:4b:7e:7b:54:3a:a2:25:18:9b:41:ca:5e:35:4f:a0:2c:4a: bb:d2:74:4e:2f:94:98:26:80:0d:ce:8f:df:60:24:32:0e:7d: c3:36:72:d6:21:13:3c:34:81:ee:df:df:6a:d0:43:a1:4b:8e: 16:b6:9d:14:7b:d7:79:a2:b5:12:83:41:a4:5b:8a:21:a3:76: 57:34:78:89:27:8c:f0:5a:d7:de:62:d2:c2:c7:48:d9:23:ff: e5:84:b5:37:ee:57:43:65:72:42:1e:e6:0f:0e:d7:97:e4:31: ff:95:0d:c8:6a:b2:68:51:f3:5d:2c:c0:b3:f5:86:b5:6f:b1: 54:48:0a:d3:e2:ba:45:a8:07:af:7e:f1:07:b1:97:1e:eb:ca: 14:b6:95:c9:4d:a7:8c:d2:3f:e9:a7:ad:76:eb:ce:bb:a9:3e: a2:fd:75:9a:01:f1:3d:1e:5d:87:2d:d0:64:e6:a8:a5:9d:bf: 8a:eb:87:9e:b6:55:03:9c:2d:e9:8c:1e:54:d9:29:4f:35:db: da:e6:bd:94:53:76:d7:47:65:be:3c:73:54:8f:84:7f:ed:9b: c4:89:5d:a4:10:df:70:f5:62:a8:01:77:e6:65:c5:f9:93:1f: 27:df:d5:2f:27:4d:c4:7c:18:7d:d5:5b:25:d9:b5:d8:39:f8: 69:e9:ba:52 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUaz7Sx/3g5BBDvAlQugnazY6Nhz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTEwMDEyMjE1MDlaFw0yNjA5MzAyMjIwMDlaMDMxMTAvBgNV BAMTKEZGQjNGMEY1RDRCQzNBMzZCRUQ5QzRBQjg4NUJFMzZFRkY3REM1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHM67YlApZzJ7nfOw4VFaW7oM0 r8oT+Ij4UHT8OuH3PafU8SY9msZWJdA3kX0LEpXO3peWK6r2J7wor98h+tYcESoG L77qGr1G/FRTbgMol1TG7ShUQYOnKdd97NJfatll8emmrpk7yOvxVAMfrtQOE89R Q+zy28ef8IIhGVNHksEByB+lmsO3D9VqR+AjHhxGLL46q1LHh7bF66t2cfr+pZSQ IAghRgrnX0Qhlzz1hVh2jtHpVVfokzlMEyWHjxBtFVpuWG3MYpe1ClsZQ+8WHgKq 5eTyMoQUu3vZqb2cxj6zcvCYx3qgk+VfW21Esj5bidNFiyf4YzOVMC1TbDoVAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU/7Pw9dS8Oja+2cSriFvjbv99xY8wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjA2MDQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwUswDQYJKoZIhvcNAQELBQADggEBAD1L fntUOqIlGJtByl41T6AsSrvSdE4vlJgmgA3Oj99gJDIOfcM2ctYhEzw0ge7f32rQ Q6FLjha2nRR713mitRKDQaRbiiGjdlc0eIknjPBa195i0sLHSNkj/+WEtTfuV0Nl ckIe5g8O15fkMf+VDchqsmhR810swLP1hrVvsVRICtPiukWoB69+8Qexlx7ryhS2 lclNp4zSP+mnrXbrzrupPqL9dZoB8T0eXYct0GTmqKWdv4rrh562VQOcLemMHlTZ KU8129rmvZRTdtdHZb48c1SPhH/tm8SJXaQQ33D1YqgBd+ZlxfmTHyff1S8nTcR8 GH3VWyXZtdg5+GnpulI= -----END CERTIFICATE-----Generated at Wed Oct 8 17:19:34 2025 by rpki-client